Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa
File:                     3138392e39302e32382e302f32322d3332203d3e20323632383334.roa (raw, json)
Hash identifier:          NqCsVvMgqzBE9jf9hNJOVmIl47b4xU5XXpYcVIUm33k=
Subject key identifier:   66:CA:93:84:A0:18:83:97:CC:E6:3F:AD:35:0F:9D:14:ED:7F:93:F4
Certificate issuer:       /CN=5002EE56B40431CA262F59717A16E5A8812286A5
Certificate serial:       2097E87826943F4462C88DBBF885DD021B09425D
Authority key identifier: 50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa
Signing time:             Thu 09 Jul 2026 14:34:35 +0000
ROA not before:           Thu 09 Jul 2026 14:29:35 +0000
ROA not after:            Thu 08 Jul 2027 14:34:35 +0000
asID:                     262834
IP address blocks:        189.90.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl
                          rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:97:e8:78:26:94:3f:44:62:c8:8d:bb:f8:85:dd:02:1b:09:42:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5002EE56B40431CA262F59717A16E5A8812286A5
        Validity
            Not Before: Jul  9 14:29:35 2026 GMT
            Not After : Jul  8 14:34:35 2027 GMT
        Subject: CN=66CA9384A0188397CCE63FAD350F9D14ED7F93F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:0a:25:c5:c5:14:de:e9:06:a9:c9:35:2e:
                    16:ce:f3:7f:19:10:77:8e:f8:d8:fc:1a:3e:f1:2f:
                    e1:35:22:19:eb:55:fa:c5:e3:02:7b:4a:81:07:4e:
                    d7:cb:f8:c4:eb:fa:44:b8:bb:6d:c8:2d:46:31:29:
                    48:56:79:91:6f:53:b5:13:23:6c:92:22:6e:e9:f8:
                    ad:13:d1:bb:dc:02:05:e8:cc:ae:6b:dd:dd:ec:d5:
                    9b:4e:dd:ac:92:07:b3:fe:66:b8:b0:25:7a:b9:2a:
                    6c:2f:b9:98:cf:4a:9c:89:fe:79:f6:98:69:5c:75:
                    3b:31:79:4b:46:b5:82:de:68:30:85:1a:d1:ca:66:
                    53:ea:48:92:6f:0f:f6:df:7c:21:f4:27:9c:29:d5:
                    9b:60:9a:e4:1c:cc:a5:e5:bb:28:ed:c5:79:cb:bf:
                    4c:0c:cc:5b:79:04:c9:8b:63:8d:1f:bd:05:31:59:
                    62:f0:ed:e1:39:67:88:6e:bc:f6:e4:7f:3e:23:75:
                    58:c7:51:3f:c0:70:f9:a4:bf:f3:23:96:c0:9b:20:
                    01:be:33:c6:04:05:d3:5c:7c:41:f7:50:1e:8a:ab:
                    68:ce:ff:28:74:cc:67:4a:f4:b2:18:76:23:9d:7e:
                    48:2a:bd:7d:4c:de:4f:81:7c:70:d8:67:90:d2:42:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:93:84:A0:18:83:97:CC:E6:3F:AD:35:0F:9D:14:ED:7F:93:F4
            X509v3 Authority Key Identifier:
                keyid:50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:17:3c:1e:9f:f3:57:8c:59:7e:56:00:b4:2c:b5:d2:48:4f:
         b6:7a:12:24:66:21:e5:09:64:31:cd:6a:44:44:f3:05:2f:3c:
         8c:12:49:91:51:3c:2e:a8:61:30:12:3f:0a:1f:a7:b6:94:4d:
         2f:18:1b:01:0c:f1:a2:4b:ac:7e:25:0d:7e:57:3b:69:48:12:
         08:f4:4e:fc:b0:71:94:b0:54:84:3e:23:4f:6d:bd:4d:25:d8:
         0b:72:c7:06:be:aa:36:00:eb:65:51:7a:9f:82:c5:5e:18:35:
         7b:58:51:f7:0c:68:a3:73:6a:e1:06:67:0a:91:95:5e:72:a9:
         9f:d6:be:12:b2:1a:f1:de:fe:a2:ec:5a:bf:36:21:2a:49:85:
         52:59:ad:26:d2:58:b0:95:da:28:97:11:85:72:1e:7c:9a:8d:
         83:91:d7:e1:4b:af:2b:8f:91:b1:49:74:24:f5:32:45:86:19:
         b2:51:38:b0:c6:d1:f2:0a:d6:44:49:3e:c9:af:f8:9e:bb:54:
         81:cd:fc:92:08:4b:a2:52:4c:86:8a:bc:de:5e:9e:84:fb:40:
         64:3e:39:1e:cf:80:11:b2:25:6a:a5:88:60:37:07:e4:90:ea:
         77:01:78:76:e4:6f:73:d7:4d:be:0d:f9:4d:2c:14:9a:a4:a8:
         97:21:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:22:59 2026 by rpki-client